Xfce Forum

crisis

Member

Registered: 2022-01-03

Posts: 1

xfce4-screenshooter security problem

xfce4-screenshooter creates files in /tmp with world readable permissions meaning any user or software on the machine can view the screenshots of any other user or software. I tested on Ubuntu 20.04 and Arch Linux (latest), both exhibit the same behavior.

I would have reported this as a bug but there doesn't seem to be a way to report bugs against "goodies" projects. ???

ToZ

Administrator

From: Canada

Registered: 2011-06-02

Posts: 11,485

Re: xfce4-screenshooter security problem

Hello and welcome.

Xfce bugs can be reported at Xfce's gitlab instance - specifically for xfce4-screenshooter here. However, a bug report for this already exists. Feel free to add your comment to it.

---

Please remember to mark your thread [SOLVED] to make it easier for others to find
--- How To Ask For Help | FAQ | Developer Wiki  |  Community | Contribute ---